Token permission bug fixed on the XRP Ledger

The update closed a loophole that, in certain cases, also allowed new tokens to be created with a narrower permission.

An issuer can give a separate permission, for example to a payment provider, to take tokens out of circulation when they are redeemed. Because of the bug, under certain conditions this permission could also be enough to create new tokens. The fix handles the two operations separately again.

The bug could have affected assets issued on the network, such as some stablecoins. XRP's own supply was not affected by the permission bug, and at the time of the report there was no publicly confirmed abuse.